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I.  INTRODUCTION 


The  single  event  upset  (SEU)  hazard  of  a  microprocessor  (pP)  may  not  be 
recognized  until  late  in  the  development  cycle  of  the  spacecraft  system.  At 
that  time,  replacement  of  one  pP  with  another,  using  a  different  instruction 
set,  is  not  a  realistic  solution  due  to  the  extensive  software  development 
effort  already  invested  as  well  as  the  impact-  of  such  an  action  upon  cost  and 
schedule.  Other  alternatives  do  exist  which  may  involve  hardware  changes  but 
will  allow  the  system  to  tolerate  certain  types  of  SEU  errors  and  recover 
successfully  from  the  rest. 

Many  SEU  errors  will  affect  data  or  computed  results  in  a  fashion  similar 
to  the  errors  arising  from  other  electrical  and  EMI  noise  sources.  Immunity 
from  these  SEU  errors  is  already  provided  by  noise  immunity  techniques.  Other 
kinds  of  SEU  errors  in  the  pP  are  capable  of  causing  system  malfunctions  that 
were  never  considered  possible  when  the  system  requirements  were  defined.  The 
first  task  in  developing  a  survival  strategy  for  this  type  of  error  is  to 
identify  the  storage  nodes  that  may  cause  these  catastrophic  system  failures 
and  to  define  the  SEU  cross  section  for  upset  of  those  nodes. 

Published  results^  show  the  consequences  of  some  pP  upsets,  and  suggest 
that  the  program  counter  (PC)  and  stack  pointer  (SP)  are  two  critical  nodes. 
Upset  of  these  registers  can  cause  a  program  jump  that  writes  over  portions  of 
memory  before  ending  up  in  an  idle  loop  or  coming  to  a  complete  halt.  In 
addition  to  the  general  purpose  register  (GPR)  upsets,  other  internal  nodes 
can  be  upset,  and  some  of  these  upsets  may  have  similar  adverse  effects  on 
system  operations. 

This  work  was  motivated  by  the  need  to  define  the  SEU  vulnerability  of 
the  Zilog  Z-80,  an  NMOS  pP,  which  is  to  be  used  aboard  the  Space  Shuttle  to 
control  the  Centaur  upper  stage  from  lift-off  until  Centaur  separation.  The 
cosmic  ray  environment  for  the  baseline  Shuttle  orbits  with  inclination  angles 
less  than  45°  present  no  real  SEU  hazard. At  higher  inclinations,  the 
geomagnetic  shield  becomes  more  transparent  and  the  risk  of  upset  can  be 
significant.  The  NSC-800  was  also  tested.  This  CMOS  device  uses  the  Z-80 


instruction  set  and  was  considered  to  be  a  candidate  for  retrofit  if  the  Z-80 
proved  too  vulnerable. 

Many  previous  studies  of  yPs^-^  used  a  reference  device  or  "golden  chip" 
(GC)  to  recognize  the  occurrence  of  an  upset  error.  For  the  heavy  ion  tests, 
a  "device"  cross  section  was  usually  determined,  however,  the  results  were 
often  influenced  by  the  choice  of  test  software  routines  and  represented  an 
average  response  of  device  and  software.  For  our  needs,  a  more  specific  test 
of  the  device  is  required  to  define  the  upset  cross  section  of  the  major  yP 
subsystems  such  as  the  GPR,  internal  latches,  and  control  lines. 

The  objectives  of  these  experiments  are  to:  (1)  develop  a  yP  test  method 
that  can  provide  device-error  data  in  sufficient  detail  to  permit  separation 
of  the  GPR  upsets  from  the  internal  latch  upsets,  (2)  determine  the  cross 
section  and  LET  threshold  for  the  GPRs,  (3)  determine  the  upset  contribution 
of  the  internal  latches,  and  (4)  examine  the  bit  errors  that  reach  the  control 
lines  to  find  error  patterns  that  may  pose  unexpected  hazards  to  system 
operations. 
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11.  EXPERIMENTAL 


Heavy  ion  testing  was  performed  at  the  Berkeley  88"  Cyclotron  and  at  the 
ORNL  Tandem  Facility.  Proton  testing  was  performed  at  the  University  of 
Indiana  Cyclotron.  The  charged  particle  beam-control  and  exposure  apparatus 
that  was  used  in  the  heavy  ion  tests  is  described  in  detail  elsewhere.^ 

Heavy  ion  bombardment  is  performed  in  vacuum  with  device  lids  removed.  Proton 
tests  employed  an  abbreviated  version  of  the  beam  exposure  apparatus  described 
above,  and  the  tests  were  performed  in  air.  Three  Z-80  and  three  NSC-800 
devices  were  used  in  these  tests. 

The  heavy  ion  particle  beams  used  in  these  tests  span  the  linear  energy 

2 

transfer  (LET)  scale  from  0.7  to  17.7  MeV-cm  /rag.  A  list  of  the  ion,  energy, 
and  LET  is  given  in  Table  1.  Proton  energies  of  100  and  200  MeV  were  used  for 
the  Z-80  tests.  No  proton  tests  were  performed  on  the  NSC-800. 

1.  DATA  ACQUISITION 

The  Intelligent  Memory  Controlled  Operation  (1MCO)*  test  method  we  use 
employs  a  golden  chip  for  error  recognition,  but  uses  a  gated  hardware 
comparator  to  test  all  device  output  pins  for  error  at  the  end  of  each  machine 
cycle.  This  approach  will  identify  errors  at  the  sub-instruction  level  at 
their  first  appearance  on  the  device  pins.  When  an  error  is  detected,  all  32 
output  pins  (16  address,  8  data  and  8  control)  of  both  the  device  under  test 
(DUT)  and  the  GC  are  recorded  in  a  diskette  error  file. 

A  DEC  LSI/11-23  computer  is  the  controller  used  in  the  IMCO  method.  It 
controls  all  test  sequences  and  acts  as  memory  and  1/0  device  for  both  the  DUT 
and  GC.  Both  chips  receive  program  instructions  in  parallel  from  the  IMCO. 

The  IMCO  also  decodes  the  Z-80  opcodes  so  that  it  can  issue  "wait" 
instructions  to  the  Z-80s  to  allow  more  time  for  error  checking  and  other 
housekeeping  tasks. 

The  Intelligent  Memory  Controlled  Operation  test  method  was  developed  by 
C.  King. 
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Table  1.  Ion  Species,  Energies,  and  Linear  Energy  Transfer 
(LET)  for  Ion  Beams  Used  In  These  Tests. 


Ion 

Species 

Energy 

(MeV) 

LET 

(MeV-cm^/ mg ) 

Argon 

84 

17.73 

176 

14.28 

Neon 

92 

5.46 

Oxygen 

37 

5.12 

150 

2.23 

Nitrogen 

69 

2.75 

Carbon 

121 

1.22 

240 

0.73 

Hydrogen 

100 

0.005 

200 

0.0036 

As  a  result,  the  Z-80  Instruction  rate  is  reduced  to  a  few  hundred 
instructions  per  second.  Both  devices  are  synchronized  by  a  1-MHz  clock  line. 

2.  GENERAL  PURPOSE  REGISTERS 

The  general  purpose  register-memory  cell  of  the  Z-80  is  a  six  transistor 
design  using  depletion  mode  load  transistors.  An  electron  photomicrograph  of 
a  general  purpose  register  cell  from  a  device  used  in  these  tests  is  shown  in 
Fig.  1.  From  this  figure  the  maximum  area  of  the  Z-80  GPR  memory  cell  is 
3141  pm  (3.141  x  10E-5  cmz).  Since  each  memory  cell  contains  two  bits,  the 
maximum  area  of  a  single  bit  is  taken  to  be  1570  ym^  (1.57  x  10E-5  cm2). 

3.  INTERNAL  LATCHES 

In  the  Z-80,  the  32  output  signals  are  connected  to  the  device  pins  by 
means  of  dynamic  latches  which  are  refreshed  on  each  rising  clock  cycle 
(T-state).  These  bus  latches  form  a  subset  of  the  internal  latches  and 
contribute  directly  to  any  upsets  seen  on  the  device  pins.  Other  internal 
latches  are  used  to  load,  move,  and  manipulate  data  in  the  GPRs .  Upset  of 
these  latches  will  also  contribute  to  the  errors  seen  on  the  device  pins.  The 
size  of  this  contribution  will  be  instruction  dependent. 

Upset  errors  for  a  group  of  internal  latches  can  be  seen  by  studying  the 
errors  in  the  control  lines.  The  control  signals  are  generated  during 
Instruction  decoding  and  are  stored  internally  until  being  placed  on  the 
control  lines  when  the  proper  machine  cycle  is  executed.  Control-line  bits 
are  not  directly  accessible  to  the  programmer  and  do  not  communicate  with  the 
GPRs.  Thus,  control-line  errors  must  arise  exclusively  from  the  upset  of 
internal  storage  nodes  other  than  the  general  purpose  registers. 

4.  TEST  SOFTWARE 

The  software  routines  used  in  these  tests  were  designed  to  display  upsets 
in  the  general  purpose  registers.  A  family  of  software  test  routines  were 
used  individually  and  concatenated  into  larger  routines  to  survey  the  upset 
sensitivity  of  the  Z-80  to  different  program  instructions. 
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Photomicrograph  of  the  Z-80  General  Purpose 
Register  Memory  Cell  Used  in  This  Study.  The 
area  of  the  cell  is  3141  pm  (3.141  X  10E-5  cm^). 
Each  cell  contains  two„bits.  Thus,  the  cell  area 
for  one  bit  is  1  570  p.in  (1.57  X  10E-5  cm  ) 
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Program  66  is  the  most  useful  in  revealing  upsets  in  the  GPRs.  This 
routine  effectively  tests  all  26  GPRs  by  checking  each  register  sequentially, 
in  a  continuous  loop,  until  an  error  is  detected.  This  routine  uses  the 
"push”  instruction  exclusively  to  output  each  of  the  22  8-bit  registers  and 
minimizes  internal  latch  upsets  by  limiting  register  manipulation. 

The  other  test  routines  test  less  than  26  8-bit  registers  due  to  the 
instructions  used  to  survey  the  various  Z-80  operations.  For  these  routines, 
the  object  code  was  analyzed  to  derive  an  average  number  of  registers 
tested.  That  value  is  used  to  normalize  the  computed  cross  section  and 
appears  in  the  legend  of  the  appropriate  data  figure.  These  routines  perform 
more  register  manipulations  and  therefore  allow  more  internal  latch  upsets  in 
the  data. 


III.  RESULTS  AND  DISCUSSION 


A.  Z-80  TESTING 

An  overall  summary  of  the  Z-80  upset  errors  is  given  in  Table  2.  The  bit 
map  shown  lists  the  frequency  and  location  of  errors  by  bit-flip  count.  The 
single  bit  errors  in  the  address  and  data  lines  are  used  to  display  the  upset 
cross  section  of  the  general  purpose  registers.  Errors  having  multiple  bit- 
flips  suggest  more  complicated  pathways  to  the  device  pins  from  the  site  of 
the  initial  upset.  The  probability  of  two  or  more  upsets  within  the  time 
needed  to  complete  a  software  loop  is  very  small. 

The  heavy  ion  data  for  the  Z-80  are  shown  in  Fig.  2.  Data  from  each  test 
routine  are  normalized  by  the  average  number  of  8-bit  registers  tested.  The 
value  used  is  given  in  the  legend.  The  maximum  area  of  a  single  GPR  bit  is 
also  indicated. 

There  are  several  features  of  this  data  that  will  be  addressed  by  our 
analysis.  First,  the  gradual  slope  of  the  data  over  most  of  the  measured 
range  of  LET  does  not  reveal  a  LET  threshold  for  the  GPR.  The  slope  is  more 
gradual  than  is  usually  seen  in  RAM  tests. ^  Second,  considerable  scatter  is 
seen  in  the  measured  data  that  is  not  a  consequence  of  the  register  normal¬ 
ization  process.  And  finally,  the  cross  section  at  high  LET  does  not  show 
much  tendency  towards  saturation,  and  the  measured  values  exceed  the  maximum 
area  of  a  single  general  purpose  register  bit. 

The  data  of  Fig.  2  represent  "device"  cross  section  data  of  the  type 
normally  obtained  in  heavy  ion  tests.  Each  data  point  includes  all  the  errors 
from  all  nodes  in  the  device  that  are  upset.  Our  analysis  makes  use  of  the 
detailed  error  data  recorded  with  each  observed  error  and  selects  those  errors 
that  occur  on  certain  device  pins  during  certain  machine  cycles. 

1.  GENERAL  PURPOSE  REGISTERS 

The  first  machine  cycle  of  every  program  instruction  is  called  the 
"opcode  fetch"  cycle.  At  the  end  of  this  machine  cycle  the  PC  is  on  the 
address  line.  Computing  the  cross  section  for  single  bit  errors  in  the 
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NOTE:  Errors  having  bit-flips  In  Address  and  Data  lines  are 

listed  in  column  <A+D>.  The  total  number  of  bit-flips 
divided  by  2  defines  the  "Bit"  row  for  the  entry.  C  denotes 
control  lines.  In  column  <A+D+C>  the  total  bit-flip  count 
is  divided  by  3.  (Integer  division). 
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Total  Device  Upset  Cross  Section  for  the  Z-80. 
Heavy  ion  data  using  16  different  test  software 
routines.  The  number  of  8-bit  registers  tested 
in  a  given  routine  is  indicated  in  the  legend. 
Cross  section  is  on  a  "per  bit"  basis.  Also 
shown  is  the  area  for  a  single  register  bit. 


address  lines  during  the  opcode  fetch  machine  cycle  gives  the  results  shown  in 
Fig.  3.  Each  data  point  shown  is  a  mixture  of  PC  upsets  and  internal  latch 
upsets . 

The  plot  shows  evidence  of  an  LET  threshold  near  4  MeV-cm  /mg.  There  are 

18  additional  data  points  with  LET  <4.0  MeV-cm^/mg  that  do  not  appear  on  the 

2 

figure  because  their  cross  section  values  are  less  than  1  pm  (1.0  X  10E-8 

7  2 

cnr).  All  data  points  having  cross  sections  less  than  50  pm  (5.0  X  10E-7) 

represent  areas  that  are  too  small  to  be  features  of  the  PC.  These  data 

points  must  represent  a  larger  feature,  but  one  with  a  small  duty  cycle  for 

1 2 

upset.  The  internal  latch  would  display  this  property. 

A  similar  analysis  can  display  the  cross  section  for  upset  of  the 
stack-pointer  (SP).  Program  66  uses  the  "push"  instruction  exclusively  for 
memory-write  operations.  Consequently,  each  memory-write  machine  cycle  for 
program  66  will  have  the  SP  on  the  address  lines  and  one  of  the  22  8-bit  GPRs 
on  the  data  lines.  Using  data  from  program  66  and  computing  the  cross  section 
for  single  bit  address-line  errors  at  the  end  of  the  memory-write  machine 
cycle  gives  the  results  shown  in  Fig.  4. 

The  cross  section  of  the  remaining  22  8-bit  general  purpose  registers  can 
be  displayed  all  at  once  by  plotting  the  cross  section  for  single  bit  errors 
in  the  data  lines  during  the  memory-write  cycle  of  program  66.  The  result  is 
given  in  Fig.  5. 

These  three  figures  present  evidence  for  a  LET  threshold  at  about  4  MeV- 

2 

cm  /mg  for  all  26  general  purpose  registers.  In  each  figure,  however,  the 
measured  cross  section  at  higher  LET  values  exceeds  the  single  bit  area  for 
the  general  purpose  register  (1570  pm).  This  observation  can  only  mean  that 
other  upset  sites,  such  as  the  internal  latches,  are  contributing  to  the 
measured  error  data  in  this  region.  We  expect  the  GPR  registers  to  exhibit  a 
cross-section  saturation  at  LET  values  slightly  above  the  upset  threshold  like 
that  seen  in  RAM  tests. ^  The  rising  slope  of  the  measured  data  in  the  GPR 
saturation  region  (see  Figs.  2  through  5)  supports  the  inference  that  the 
internal  latch  error  contribution  continues  to  increase  throughout  this  LET 
range. 
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EFFECTIVE  LET,  MeV-cm2/mg 


Upset  Cross  Section  for  a  Single  Bit  Address 
Une  Error  During  the  Opcode  Fetch  Machine 
Cycle  of  the  Z-80.  Plot  shows  program  counter 
upsets  (see  text). 


EFFECTIVE  LET,  MeV-cm^/mg 


Upset  Cross  Section  for  a  Single  Bit  Address 
Line  Error  During  the  Memory-Write  Cycle  of 
Program  66.  Plot  shows  stack  pointer  upsets 
(see  text). 


EFFECTIVE  LET,  MeV-cm^/mg 


5.  Upset  Cross  Section  for  a  Single  Bit  Data 
Line  Error  During  the  Memory-Write  Cycle 
Program  66.  The  plot  shows  the  remaining 
22  8-bit  register  upsets. 
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INTERNAL  LATCHES 


The  upset  cross  section  for  a  group  of  internal  latches  can  be  computed 
using  single  bit  errors  in  the  control-lines  during  the  opcode  fetch  machine 
cycle.  Since  this  cycle  is  common  to  all  test  programs,  data  from  all  test 
programs  can  be  used  to  get  a  more  complete  result.  Figure  6  presents  a  plot 
of  this  data. 

In  general,  different  machine  cycles  are  expected  to  use  different  groups 
of  internal  latches  in  different  ways.  Consequently,  we  would  expect  the 
cross  section  for  upset  in  the  control  lines  to  differ  from  one  kind  of 
machine  cycle  to  another.  The  error  data  show  that  out  of  the  3465  errors 
seen  during  the  opcode  fetch  cycle,  447  errors  were  in  the  control-lines. 

This  is  the  largest  percentage  of  control-line  errors  among  the  different 
machine  cycles.  The  smallest  percentage  of  control  errors  occurred  during  the 
memory-write  cycle.  In  that  case,  only  76  control-line  errors  occurred  out  of 
a  total  of  5763  errors.  The  cross  section  for  a  single  bit  control-line  error 
during  the  memory-write  cycle  is  about  one-fifth  as  large  as  the  cross  section 
for  a  single  bit  control-line  error  in  the  opcode  fetch  cycle  shown  in  Fig.  6. 

The  scatter  seen  in  the  internal  latch  cross  section  data  explains  the 
origin  of  the  scatter  observed  in  the  cross  section  data  of  Figs.  2  through 
5.  The  magnitude  of  the  internal  latch  cross  section  increases  in  the  same 
gradual  manner  as  the  data  in  Fig.  2  both  below  and  above  the  LET  threshold 
for  the  GPR.  In  the  higher  LET  region  the  internal  latch  cross  section 
increase  is  similar  to  the  increase  seen  in  Figs.  3  through  5.  Eventually, 
the  data  show  that  the  cross  section  exceeds  the  area  of  the  GPR  stored  bit, 
namely,  1570  pm.  An  accurate  measurement  of  the  saturation  cross  section  for 
the  GPR  is  impossible  from  data  with  such  large  variability,  however,  an 
estimated  value  of  1.5  X  10E-5  cm  appears  reasonable. 

The  internal  latch  (IL)  cross  section  for  all  machine  cycles  is 
reasonably  well  bounded  by  the  two  expressions: 

IL  Cross  Section  =  2.0  E-7  X  LET1,9  cm2  LET  <  5.0  MeV-cm2/mg 
IL  Cross  Section  -  1.0  E-6  X  LET1,0  cm2  LET  <  5.0  MeV-cm2/mg 
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EFFECTIVE  LET,  MeV-cm2/mg 


Upset  Cross  Section  for  a  Single  Bit  Error  in 
the  Control  Lines  During  the  Opcode  Fetch 
Cycle.  Data  from  all  test  programs  are  used. 
Plot  displays  the  internal  latch  upsets  asso¬ 
ciated  with  the  opcode  fetch  machine  cycle. 
Each  machine  cycle  has  a  cross  section  similar 
to  this  figure. 


These  expressions  imply  the  existence  of  two  distinct  types  of  internal 
latch.  The  “slow"  latch  dominates  the  data  above  5  MeV-cm^/mg  with  a  linear 
LET  dependence,  and  the  "fast"  latch  is  seen  at  lower  LET  and  varies  with  the 
1.9  power  of  LET.  The  change  in  exponent  implies  that  the  "fast"  latches 
reach  saturation  near  5  MeV-cra  /mg.  This  may  be  an  artifact  of  the  curve  fit 
since  a  closer  look  at  Fig.  6  could  support  the  hypothesis  that  both  latch 
types  have  about  the  same  exponent  but  a  discontinuity  occurs  near  5  MeV- 

cm^/mg.  Either  case  leads  to  the  conclusion  that  the  "slow"  latch  has  a  LET 
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threshold  near  5  MeV-cm  /mg. 

Comparing  the  register  data  of  Figs.  3  to  5  with  the  "device"  data  of 
Fig.  2  and  the  "internal  latch"  data  of  Fig.  6  shows  that  the  "fast"  latch 
errors  are  greatly  reduced  in  the  register  data,  whereas  the  "slow"  latch 
errors  are  about  the  same.  This  comparison  shows  that  the  distinction  made 
between  "fast"  and  "slow"  latches  is  real. 

The  "fast"  latches  are  thought  to  be  internal  latches  primarily  used  for 
manipulation,  decoding,  computation,  and  signal  transmission  inside  the  pP. 
These  latches  are  designed  for  high  speed  at  low  power  and  have  small  circuit 
loading.  A  small  nodal  charge  is  expected  in  these  latches.  Discussions  with 
Zilog  suggest  that  electrical  interference  between  these  high  speed  latches 
and  other  circuit  elements  led  to  hand  routing  for  many  of  these  nodes.  Since 
each  node  is  tailored  to  its  particular  circuit  requirements,  there  is  a 
distribution  of  nodal  charge  for  these  latches.  Hand  routing  will  result  in 
larger  node  areas  so  the  small  capacitance  must  be  obtained  by  using  greater 
depletion  depth.  All  these  items  contribute  to  the  low  LET  sensitivity  for 
the  "fast"  latches. 

The  "slow"  latches  are  thought  to  be  slower  speed,  higher  power  latches 
designed  to  handle  large  and  variable  circuit  loads.  A  larger  nodal  charge  is 
expected  for  these  nodes  and  a  larger  LET  threshold  for  upset.  The  bus 
latches  seem  to  be  good  examples  of  the  "slow"  latch. 

The  large  scatter  in  the  internal  latch  data  could  result  from  several 
sources.  The  dynamic  character  of  these  latches  makes  the  number  of  errors 
vary  with  the  latch  contents.  The  voltage  "droop"  of  dynamic  latches  makes 
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the  latch  more  sensitive  just  prior  to  refresh.  Refresh  time  varies  with 
instruction  mix  and  clock  frequency.  "Droop"  varies  with  refresh  time  and 
circuit  loading  of  the  node. 

There  is  a  purely  statistical  scatter  in  the  data  since  the  number  of 
errors  entering  the  cross-section  calculation  in  some  cases  is  small.  A 
factor  of  2  should  account  for  this  variance  in  most  cases  but  the  observed 
scatter  in  the  data  is  more  like  a  factor  of  10.  The  close  design  margins  for 
many  "fast"  latches  could  allow  process  variations  to  contribute  to  the 
scatter  in  this  data.  Data  in  this  study  are  not  adequate  to  determine  the 
source  of  the  observed  scatter. 

3.  PROTON  TESTS 

Proton  testing  of  the  Z-80  with  100  and  200  MeV  protons  at  normal 
incidence  led  to  the  results  of  Table  3.  These  data  show  that  the  Z-80  is  not 
upset  by  protons  directly,  J  however  nuclear  recoil  upsets  are  observed  at 
very  large  fluences.  The  energies  used  should  reveal  any  proton  sensitivity 
of  the  Z-80.17 

B.  NSC-800  TESTING 

A  limited  number  of  heavy  ion  tests  were  performed  on  the  NSC-800.  In 
all,  30  data  runs  were  made  using  argon  and  neon  ions.  Of  these  runs  six  were 
terminated  when  latchup  or  abnormal  error  rates  were  observed.  Six  other  runs 
went  to  completion  without  any  errors  being  recorded.  Detailed  error  data 
were  recorded  on  22  runs.  Those  data  are  summarized  in  Table  A.  The  soft 
error  data  from  the  six  latchup  runs  are  included  In  Table  A  but  the  "non- 
random"  and  latchup  errors  are  removed. 

A  plot  of  the  soft  error  cross  section  data  for  the  NSC-800  is  shown  in 
Fig.  7.  Also  shown  is  our  best  estimate  for  the  latchup  cross  section  in 
which  the  first  occurrence  of  the  non-random  error  is  treated  as  though  it 
were  a  latchup  event. 

Comparing  the  soft  upset  data  of  Fig.  7  with  the  Z-80  data  of  Figs.  2 
through  6  suggests  to  us  that  the  NSC-800  soft  errors  may  be  upsets  in  the 
internal  latches  of  the  NSC-800  rather  than  upsets  in  the  GPRs .  Whereas  the 
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Table  3.  Proton  Testing  Summary  for  the  Z-80 


100  MeV  Protons  at  Normal 

Incidence 

200  MeV  Protons  at  Normal 

Incidence 

Run 

Number 

o 

Protons/ cm^ 
xlO6 

Errors 

Run 

Number 

o 

Protons/ cm 
xlO6 

Errors 

18 

5.61 

0 

49 

158. 

0 

19 

83.3 

0 

50 

5610. 

5 

20 

72.2 

0 

52 

772. 

0 

21 

55.7 

0 

53 

5550. 

3 

22 

57.2 

0 

54 

5550. 

0 

23 

55.7 

0 

55 

5550. 

2 

24 

56.1 

0 

25 

5.72 

0 

26 

2.39 

0 

27 

3430. 

5 

28 

5890. 

1 
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Table  4.  NSC-800  Bit  Error  Frequency  Map 


Number  of  Bit-Flips,  Frequency  Observed  and  Line 
Location  (Latchup  Errors  Removed) 

Bits 

Address 

Data 

Control 

>9 

2 

0 

0 

=9 

1 

0 

0 

-8 

0 

1 

0 

=7 

4 

1 

0 

=*6 

0 

0 

0 

-5 

3 

0 

0 

-4 

3 

2 

0 

-3 

4 

0 

0 

=2 

3 

4 

2 

-1 

77 

6 

5 

Totals 

-  97 

14 

7 
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EFFECTIVE  LET,  MeV-cm2/mg 


Soft  Upset  and  Latchup  Cross  Sections  for  the 
NSC  800.  Latchup  data  includes  "anomalous" 
rate  error  data.  Soft  error  data  includes 
random  errors  observed  prior  to  the  start  of 
latchup  (see  text). 
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NSC-800  data  are  very  incomplete,  the  gradual  slope  of  the  data  and  the  lack 
of  a  discernable  saturation  in  the  cross  section  up  to  a  LET  of  about  35  MeV- 
cm^/mg  lead  to  this  speculation.  An  analysis  similar  to  that  given  above  for 
the  Z-80  with  more  complete  measurements  could  confirm  this  interpretation. 


IV.  CONCLUSIONS 


The  overall  SEU  cross  section  of  a  microprocessor  can  be  resolved  into 
cross  sections  for  important  sub-systems.  The  analysis  presented  above  shows 
that  the  upset  properties  of  the  general  purpose  registers  can  be  extracted 
from  measured  device  data  if  sufficient  attention  is  given  to  gathering 
complete  data  on  each  measured  error. 

Analysis  of  the  heavy  ion  data  for  the  Z-80  shows  that  all  208  general 

2 

purpose  register  bits  have  the  same  upset  threshold  of  4.0  ±0.5  MeV-cm  /mg. 
Based  upon  measured  data  and  photomicrographs  we  conclude  that  the  Z-80 
general  purpose  register  bit  has  a  saturation  cross  section  of  about 
1.5  X  10E-5  cm^. 

The  internal  latches  of  the  Z-80  play  a  dominant  role  in  the  upset  of 
this  device.  The  internal  latches  will  upset  for  ions  having  LET  as  low  as 
0.7  MeV-cm  /mg.  Above  the  LET  threshold  for  the  general  purpose  registers, 
the  internal  latches  contribute  more  errors  than  the  general  purpose 
registers. 

The  Z-80  heavy  ion  data  show  that  the  cosmic  ray  environment  could  upset 
certain  Internal  latches  in  the  Z-80  and  cause  contradictory  signals  to  appear 
on  the  control  bus.  Among  these  control  errors  are:  read/write  active  simul¬ 
taneously;  "halt”  bit  asserted;  I/O  and  memory  both  active  simultaneously;  and 
the  Ml  bit  toggled  in  the  middle  of  an  executing  instruction.  Depending  on 
the  system  design,  these  unexpected  signals  may  cause  new  kinds  of  system 
failures  that  need  to  be  analyzed. 

The  Z-80  internal  latches  and  general  purpose  registers  are  not  sensitive 
to  high  energy  protons  in  the  100  to  200  MeV  range.  Nuclear  recoil  upsets  do 
occur  at  very  high  fluences. 

The  NSC-800  exhibits  latchup  and  two  varieties  of  non-random  upset  with 
greatly  Increased  error  rates  over  the  random  error  rate.  The  corrected  soft 
error  cross  section  for  the  NSC-800  suggests  that  internal  latches  and  not  the 
general  purpose  registers  are  being  upset  below  a  LET  of  35  MeV-cm^/mg. 
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LABORATORY  opt rations 


The  Aerospace  Corporation  functions  as  an  architect  ineer  '  tor 
national  security  projects,  specializing  in  advanced  military  space  systems. 
Providing  research  support,  the  corporation's  Laboratory  Operations  conducts 
experimental  and  theoretical  investigations  that  focus  on  the  application  of 
scientific  and  technical  advances  to  such  systems.  Vital  to  t he  success  of 
these  investigations  is  the  technical  staff's  wide-ranging  expertise  and  its 
ability  to  stay  current  with  new  devel opment s.  This  expertise  is  enhanced  hv 
a  research  program  aimed  at  dealing  with  the  many  problems  associated  with 
rapidly  evolving  space  systems.  Contributing  their  capabilities  to  t-'e 
research  effort  are  these  individual  laboratories: 

Aerophysics  Laboratory:  Launch  vehicle  and  reentry  fluid  mechanics,  heat 
transfer  and  flight  dynamics;  chemical  and  electric  propulsion,  propellant 
chemistry,  chemical  dynamics,  environmental  chemistry,  trace  detection; 
spacecraft  structural  mechanics,  contamination,  thermal  and  structural 
control;  high  temperature  thermomechanics,  gas  kinetics  and  radiation;  cw  and 
pulsed  chemical  and  excimer  laser  development  including  chemical  kinetics, 
spectroscopy,  optical  resonators,  beam  control,  atmospheric  propagation,  laser 
effects  and  countermeasures. 

Chemistry  and  Physics  Laboratory:  Atmospheric  chemical  reactions, 
atmospheric  optics,  light  scattering,  state -spec i f ic  chemical  reactions  and 
radiative  signatures  of  missile  plumes,  sensor  out -of -f  ie  Id-of -view  rejection, 
applied  laser  spectroscopy,  laser  chemistry,  laser  optoelectronics,  solar  cell 
physics,  battery  electrochemistry,  space  vacuum  and  radiation  effects  on 
materials,  lubrication  and  surface  phenomena,  thermionic  emission,  photo¬ 
sensitive  materials  and  detectors,  atomic  frequency  standards,  and 
environmental  chemistry. 

Computer  Science  Laboratory:  Program  verification,  program  translation, 
performance-sensitive  system  design,  distributed  architectures  for  spaceborne 
computers,  faul t -tolerant  computer  systems,  artificial  Intelligence,  micro¬ 
electronics  appl icat ions ,  common icat io  protocols,  and  computer  security. 

Electronics  Research  Laboratory:  Microelectronics,  solid-state  device 
physics,  compound  semiconductors,  radiation  hardening;  electro-optics,  quantum 
electronics,  solid-state  lasers,  optical  propagation  and  communications; 
microwave  semiconductor  devices,  microwave/millimeter  wave  measurements, 
diagnostics  and  radlometry,  microwave/millimeter  wave  thermionic  devices; 
atomic  time  and  frequency  standards;  antennas,  rf  systems,  electromagnetic 
propagation  phenomena,  space  communication  systems. 

Materials  Sciences  Laboratory:  Development  of  new  materials:  metals, 
alloys,  ceramics,  polymers  and  their  composites,  and  new  forms  of  carbon;  non¬ 
destructive  evaluation,  component  failure  analysis  and  reliability;  fracture 
mechanics  and  stress  corrosion;  analysis  and  evaluation  of  materials  at 
cryogenic  and  elevated  temperatures  as  well  as  in  space  and  enemy -i nduced 
envl ronment s . 

Space  Sciences  Laboratory:  Magnetospher ic ,  auroral  and  cosmic  ray 
physics,  wave -par t i c le  interactions,  magnetospheric  plasma  waves;  atmospheric 
and  ionospher i c  physics,  density  and  composition  of  the  upper  atmosphere, 
remote  sensing  using  atmospheric  radiation;  solar  physics,  infrared  astronomv, 
infrared  signature  analysis;  effects  of  solar  activity,  magnetic  storms  and 
nuclear  explosions  on  the  earth’s  atmosphere,  ionosphere  and  magnetosphere; 
effects  <>f  electromagnetic  and  particulate  radiations  on  space  systems;  space 
i nstr umentat ion. 


